Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43054

In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Drain commands in target_reset handler tcm_loop_target_reset() violates the SCSI EH contract: it returns SUCCESS without draining any in-flight commands. The SCSI EH documentation (scsi_eh.rst) requires that when a reset handler returns SUCCESS the driver has made lower layers "forget about timed out scmds" and is ready for new commands. Every other SCSI LLD (virtio_scsi, mpt3sas, ipr, scsi_debug, mpi
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:8d9e7e428f40e00c0ada3ffb06023f67754ed4846a7c64c2f113feca43629be9
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/target/loopback/tcm_loop.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"757c43c692294cdfad31390accc0e90429b2ef8a","status":"affected","version":"e0eb5d38b732b011cd9ed5b1bf9f59b83c2500d3","versionType":"git"},{"lessThan":"103f79e4949513247d763c6e7f3cbbf62017afdf","status":"affected","version":"e0eb5d38b732b011cd9ed5b1bf9f59b83c2500d3","versionType":"git"},{"lessThan":"15f5241d5a52364a7e7867b49128b0442dbcad9d","status":"affected","version":"e0eb5d38b73…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6a2b2e08265ed848f86389cceeed0780ef1b3be93feeab3455f5e9e66275d086 · sha256:430859dacaeeb7f9… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/target/loopback/tcm_loop.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.13"},{"lessThan":"5.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.134","versionType":"semver"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6a2b2e08265ed848f86389cceeed0780ef1b3be93feeab3455f5e9e66275d086 · sha256:430859dacaeeb7f9… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/target/loopback/tcm_loop.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"757c43c692294cdfad31390accc0e90429b2ef8a","status":"affected","version":"e0eb5d38b732b011cd9ed5b1bf9f59b83c2500d3","versionType":"git"},{"lessThan":"103f79e4949513247d763c6e7f3cbbf62017afdf","status":"affected","version":"e0eb5d38b732b011cd9ed5b1bf9f59b83c2500d3","versionType":"git"},{"lessThan":"15f5241d5a52364a7e7867b49128b0442dbcad9d","status":"affected","version":"e0eb5d38b73…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6a2b2e08265ed848f86389cceeed0780ef1b3be93feeab3455f5e9e66275d086 · sha256:430859dacaeeb7f9… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/target/loopback/tcm_loop.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.13"},{"lessThan":"5.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.134","versionType":"semver"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6a2b2e08265ed848f86389cceeed0780ef1b3be93feeab3455f5e9e66275d086 · sha256:430859dacaeeb7f9… · /containers/cna/affected/1

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/05ac3754467363558a0a54ae4bb7c89b2c9574cf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6a2b2e08265ed848f86389cceeed0780ef1b3be93feeab3455f5e9e66275d086 · sha256:430859dacaeeb7f9… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/103f79e4949513247d763c6e7f3cbbf62017afdf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6a2b2e08265ed848f86389cceeed0780ef1b3be93feeab3455f5e9e66275d086 · sha256:430859dacaeeb7f9… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/1333eee56cdf3f0cf67c6ab4114c2c9e0a952026"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6a2b2e08265ed848f86389cceeed0780ef1b3be93feeab3455f5e9e66275d086 · sha256:430859dacaeeb7f9… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/15f5241d5a52364a7e7867b49128b0442dbcad9d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6a2b2e08265ed848f86389cceeed0780ef1b3be93feeab3455f5e9e66275d086 · sha256:430859dacaeeb7f9… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/757c43c692294cdfad31390accc0e90429b2ef8a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6a2b2e08265ed848f86389cceeed0780ef1b3be93feeab3455f5e9e66275d086 · sha256:430859dacaeeb7f9… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/7cbd69aaa507b1245240a28022bf5da0f07c68d9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6a2b2e08265ed848f86389cceeed0780ef1b3be93feeab3455f5e9e66275d086 · sha256:430859dacaeeb7f9… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/a836054ea81014117ec6b73529a21626a9e1f829"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6a2b2e08265ed848f86389cceeed0780ef1b3be93feeab3455f5e9e66275d086 · sha256:430859dacaeeb7f9… · /containers/cna/references/4

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer